@pcircle/memesh 2.6.6 → 2.6.7

package/dist/a2a/server/middleware/rateLimit.js

@@ -0,0 +1,192 @@
+import { logger } from '../../../utils/logger.js';
+import { RATE_LIMITS, ENV_KEYS } from '../../constants.js';
+const buckets = new Map();
+const stats = new Map();
+let cleanupTimer = null;
+const refillGuard = new Set();
+function getRateLimitConfig(endpoint) {
+    const envMap = {
+        '/a2a/send-message': ENV_KEYS.RATE_LIMIT_SEND_MESSAGE,
+        '/a2a/tasks/:taskId': ENV_KEYS.RATE_LIMIT_GET_TASK,
+        '/a2a/tasks': ENV_KEYS.RATE_LIMIT_LIST_TASKS,
+        '/a2a/tasks/:taskId/cancel': ENV_KEYS.RATE_LIMIT_CANCEL_TASK,
+    };
+    const defaultMap = {
+        '/a2a/send-message': RATE_LIMITS.SEND_MESSAGE_RPM,
+        '/a2a/tasks/:taskId': RATE_LIMITS.GET_TASK_RPM,
+        '/a2a/tasks': RATE_LIMITS.LIST_TASKS_RPM,
+        '/a2a/tasks/:taskId/cancel': RATE_LIMITS.CANCEL_TASK_RPM,
+    };
+    const envKey = envMap[endpoint];
+    if (envKey && process.env[envKey]) {
+        const parsed = parseInt(process.env[envKey], 10);
+        if (!isNaN(parsed) && parsed > 0) {
+            return parsed;
+        }
+    }
+    if (defaultMap[endpoint]) {
+        return defaultMap[endpoint];
+    }
+    if (process.env[ENV_KEYS.RATE_LIMIT_DEFAULT]) {
+        const parsed = parseInt(process.env[ENV_KEYS.RATE_LIMIT_DEFAULT], 10);
+        if (!isNaN(parsed) && parsed > 0) {
+            return parsed;
+        }
+    }
+    return RATE_LIMITS.DEFAULT_RPM;
+}
+function normalizeEndpoint(path) {
+    if (/^\/a2a\/tasks\/[^/]+$/.test(path)) {
+        return '/a2a/tasks/:taskId';
+    }
+    if (/^\/a2a\/tasks\/[^/]+\/cancel$/.test(path)) {
+        return '/a2a/tasks/:taskId/cancel';
+    }
+    return path;
+}
+function getBucket(agentId, endpoint) {
+    const key = `${agentId}:${endpoint}`;
+    let bucket = buckets.get(key);
+    if (!bucket) {
+        const maxTokens = getRateLimitConfig(endpoint);
+        const refillRate = maxTokens / 60_000;
+        bucket = {
+            tokens: maxTokens,
+            maxTokens,
+            lastRefill: Date.now(),
+            refillRate,
+        };
+        buckets.set(key, bucket);
+    }
+    return bucket;
+}
+function refillTokens(key, bucket) {
+    if (refillGuard.has(key)) {
+        return;
+    }
+    refillGuard.add(key);
+    try {
+        const now = Date.now();
+        const elapsed = now - bucket.lastRefill;
+        const tokensToAdd = elapsed * bucket.refillRate;
+        if (tokensToAdd > 0) {
+            bucket.tokens = Math.min(bucket.maxTokens, bucket.tokens + tokensToAdd);
+            bucket.lastRefill = now;
+        }
+    }
+    finally {
+        refillGuard.delete(key);
+    }
+}
+function tryConsume(key, bucket) {
+    refillTokens(key, bucket);
+    if (bucket.tokens >= 1) {
+        bucket.tokens -= 1;
+        return true;
+    }
+    return false;
+}
+function calculateRetryAfter(bucket) {
+    const tokensNeeded = 1 - bucket.tokens;
+    const msNeeded = tokensNeeded / bucket.refillRate;
+    return Math.ceil(msNeeded / 1000);
+}
+function updateStats(agentId, endpoint, exceeded) {
+    const key = `${agentId}:${endpoint}`;
+    let stat = stats.get(key);
+    if (!stat) {
+        stat = {
+            agentId,
+            endpoint,
+            limitExceeded: 0,
+            totalRequests: 0,
+        };
+        stats.set(key, stat);
+    }
+    stat.totalRequests += 1;
+    if (exceeded) {
+        stat.limitExceeded += 1;
+        stat.lastLimitHit = Date.now();
+        logger.warn('[Rate Limit] Limit exceeded', {
+            agentId,
+            endpoint,
+            totalExceeded: stat.limitExceeded,
+            totalRequests: stat.totalRequests,
+        });
+    }
+}
+function cleanup() {
+    const now = Date.now();
+    const expirationThreshold = 10 * 60_000;
+    for (const [key, bucket] of buckets.entries()) {
+        if (now - bucket.lastRefill > expirationThreshold) {
+            buckets.delete(key);
+        }
+    }
+    for (const [key, stat] of stats.entries()) {
+        if (stat.lastLimitHit && now - stat.lastLimitHit > expirationThreshold) {
+            stats.delete(key);
+        }
+    }
+    logger.debug('[Rate Limit] Cleanup completed', {
+        remainingBuckets: buckets.size,
+        remainingStats: stats.size,
+    });
+}
+export function startCleanup() {
+    if (cleanupTimer) {
+        return;
+    }
+    cleanupTimer = setInterval(cleanup, RATE_LIMITS.CLEANUP_INTERVAL_MS);
+    logger.info('[Rate Limit] Cleanup started', {
+        intervalMs: RATE_LIMITS.CLEANUP_INTERVAL_MS,
+    });
+}
+export function stopCleanup() {
+    if (cleanupTimer) {
+        clearInterval(cleanupTimer);
+        cleanupTimer = null;
+        logger.info('[Rate Limit] Cleanup stopped');
+    }
+}
+export function getRateLimitStats() {
+    return Array.from(stats.values());
+}
+export function clearRateLimitData() {
+    buckets.clear();
+    stats.clear();
+}
+export function rateLimitMiddleware(req, res, next) {
+    const agentId = req.agentId;
+    if (!agentId) {
+        logger.error('[Rate Limit] Missing agentId in authenticated request');
+        res.status(500).json({
+            success: false,
+            error: {
+                code: 'INTERNAL_ERROR',
+                message: 'Internal server error',
+            },
+        });
+        return;
+    }
+    const endpoint = normalizeEndpoint(req.path);
+    const key = `${agentId}:${endpoint}`;
+    const bucket = getBucket(agentId, endpoint);
+    const allowed = tryConsume(key, bucket);
+    updateStats(agentId, endpoint, !allowed);
+    if (!allowed) {
+        const retryAfter = calculateRetryAfter(bucket);
+        res.setHeader('Retry-After', retryAfter.toString());
+        res.status(429).json({
+            success: false,
+            error: {
+                code: 'RATE_LIMIT_EXCEEDED',
+                message: `Rate limit exceeded. Try again in ${retryAfter} seconds.`,
+                retryAfter,
+            },
+        });
+        return;
+    }
+    next();
+}
+//# sourceMappingURL=rateLimit.js.map

package/dist/a2a/server/middleware/rateLimit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rateLimit.js","sourceRoot":"","sources":["../../../../src/a2a/server/middleware/rateLimit.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAQ3D,MAAM,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;AAK/C,MAAM,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;AAKhD,IAAI,YAAY,GAA0B,IAAI,CAAC;AAW/C,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;AAKtC,SAAS,kBAAkB,CAAC,QAAgB;IAC1C,MAAM,MAAM,GAA2B;QACrC,mBAAmB,EAAE,QAAQ,CAAC,uBAAuB;QACrD,oBAAoB,EAAE,QAAQ,CAAC,mBAAmB;QAClD,YAAY,EAAE,QAAQ,CAAC,qBAAqB;QAC5C,2BAA2B,EAAE,QAAQ,CAAC,sBAAsB;KAC7D,CAAC;IAEF,MAAM,UAAU,GAA2B;QACzC,mBAAmB,EAAE,WAAW,CAAC,gBAAgB;QACjD,oBAAoB,EAAE,WAAW,CAAC,YAAY;QAC9C,YAAY,EAAE,WAAW,CAAC,cAAc;QACxC,2BAA2B,EAAE,WAAW,CAAC,eAAe;KACzD,CAAC;IAGF,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChC,IAAI,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAE,EAAE,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAGD,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;IAGD,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,kBAAkB,CAAE,EAAE,EAAE,CAAC,CAAC;QACvE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,OAAO,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAED,OAAO,WAAW,CAAC,WAAW,CAAC;AACjC,CAAC;AAMD,SAAS,iBAAiB,CAAC,IAAY;IAErC,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IAGD,IAAI,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/C,OAAO,2BAA2B,CAAC;IACrC,CAAC;IAGD,OAAO,IAAI,CAAC;AACd,CAAC;AAKD,SAAS,SAAS,CAAC,OAAe,EAAE,QAAgB;IAClD,MAAM,GAAG,GAAG,GAAG,OAAO,IAAI,QAAQ,EAAE,CAAC;IACrC,IAAI,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAE9B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,SAAS,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAC/C,MAAM,UAAU,GAAG,SAAS,GAAG,MAAM,CAAC;QAEtC,MAAM,GAAG;YACP,MAAM,EAAE,SAAS;YACjB,SAAS;YACT,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;YACtB,UAAU;SACX,CAAC;QAEF,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC3B,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAkBD,SAAS,YAAY,CAAC,GAAW,EAAE,MAAmB;IAEpD,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO;IACT,CAAC;IAED,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACrB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC;QACxC,MAAM,WAAW,GAAG,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC;QAEhD,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,GAAG,WAAW,CAAC,CAAC;YACxE,MAAM,CAAC,UAAU,GAAG,GAAG,CAAC;QAC1B,CAAC;IACH,CAAC;YAAS,CAAC;QACT,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;AACH,CAAC;AAYD,SAAS,UAAU,CAAC,GAAW,EAAE,MAAmB;IAClD,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAE1B,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QACvB,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAKD,SAAS,mBAAmB,CAAC,MAAmB;IAC9C,MAAM,YAAY,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;IACvC,MAAM,QAAQ,GAAG,YAAY,GAAG,MAAM,CAAC,UAAU,CAAC;IAClD,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;AACpC,CAAC;AAKD,SAAS,WAAW,CAAC,OAAe,EAAE,QAAgB,EAAE,QAAiB;IACvE,MAAM,GAAG,GAAG,GAAG,OAAO,IAAI,QAAQ,EAAE,CAAC;IACrC,IAAI,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAE1B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,GAAG;YACL,OAAO;YACP,QAAQ;YACR,aAAa,EAAE,CAAC;YAChB,aAAa,EAAE,CAAC;SACjB,CAAC;QACF,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACvB,CAAC;IAED,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC;IAExB,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC;QACxB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE/B,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE;YACzC,OAAO;YACP,QAAQ;YACR,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,aAAa,EAAE,IAAI,CAAC,aAAa;SAClC,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAKD,SAAS,OAAO;IACd,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,mBAAmB,GAAG,EAAE,GAAG,MAAM,CAAC;IAGxC,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QAC9C,IAAI,GAAG,GAAG,MAAM,CAAC,UAAU,GAAG,mBAAmB,EAAE,CAAC;YAClD,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAGD,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC1C,IAAI,IAAI,CAAC,YAAY,IAAI,GAAG,GAAG,IAAI,CAAC,YAAY,GAAG,mBAAmB,EAAE,CAAC;YACvE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE;QAC7C,gBAAgB,EAAE,OAAO,CAAC,IAAI;QAC9B,cAAc,EAAE,KAAK,CAAC,IAAI;KAC3B,CAAC,CAAC;AACL,CAAC;AAKD,MAAM,UAAU,YAAY;IAC1B,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO;IACT,CAAC;IAED,YAAY,GAAG,WAAW,CAAC,OAAO,EAAE,WAAW,CAAC,mBAAmB,CAAC,CAAC;IACrE,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE;QAC1C,UAAU,EAAE,WAAW,CAAC,mBAAmB;KAC5C,CAAC,CAAC;AACL,CAAC;AAKD,MAAM,UAAU,WAAW;IACzB,IAAI,YAAY,EAAE,CAAC;QACjB,aAAa,CAAC,YAAY,CAAC,CAAC;QAC5B,YAAY,GAAG,IAAI,CAAC;QACpB,MAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC;AAKD,MAAM,UAAU,iBAAiB;IAC/B,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;AACpC,CAAC;AAKD,MAAM,UAAU,kBAAkB;IAChC,OAAO,CAAC,KAAK,EAAE,CAAC;IAChB,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC;AAiBD,MAAM,UAAU,mBAAmB,CACjC,GAAyB,EACzB,GAAa,EACb,IAAkB;IAElB,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAE5B,IAAI,CAAC,OAAO,EAAE,CAAC;QAEb,MAAM,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;QACtE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE;gBACL,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,uBAAuB;aACjC;SACF,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,GAAG,OAAO,IAAI,QAAQ,EAAE,CAAC;IACrC,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAExC,WAAW,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC;IAEzC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,UAAU,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAG/C,GAAG,CAAC,SAAS,CAAC,aAAa,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC;QAEpD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YACnB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE;gBACL,IAAI,EAAE,qBAAqB;gBAC3B,OAAO,EAAE,qCAAqC,UAAU,WAAW;gBACnE,UAAU;aACX;SACF,CAAC,CAAC;QAEH,OAAO;IACT,CAAC;IAED,IAAI,EAAE,CAAC;AACT,CAAC"}

package/dist/a2a/server/middleware/resourceProtection.d.ts

@@ -0,0 +1,17 @@
+import type { Request, Response, NextFunction } from 'express';
+export declare function startResourceProtectionCleanup(): void;
+export declare function stopResourceProtectionCleanup(): void;
+export declare function clearConnectionTracking(): void;
+export declare function getConnectionStats(): {
+    totalIPs: number;
+    totalConnections: number;
+    topIPs: Array<{
+        ip: string;
+        connections: number;
+    }>;
+};
+export declare function connectionLimitMiddleware(): (req: Request, res: Response, next: NextFunction) => void;
+export declare function payloadSizeLimitMiddleware(): (req: Request, res: Response, next: NextFunction) => void;
+export declare function memoryPressureMiddleware(): (req: Request, res: Response, next: NextFunction) => void;
+export declare function resourceProtectionMiddleware(): ((req: Request, res: Response, next: NextFunction) => void)[];
+//# sourceMappingURL=resourceProtection.d.ts.map

package/dist/a2a/server/middleware/resourceProtection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resourceProtection.d.ts","sourceRoot":"","sources":["../../../../src/a2a/server/middleware/resourceProtection.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAiI/D,wBAAgB,8BAA8B,IAAI,IAAI,CAWrD;AAKD,wBAAgB,6BAA6B,IAAI,IAAI,CAMpD;AAKD,wBAAgB,uBAAuB,IAAI,IAAI,CAE9C;AAKD,wBAAgB,kBAAkB,IAAI;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACpD,CAkBA;AAaD,wBAAgB,yBAAyB,KAI/B,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,KAAG,IAAI,CAyF/D;AAeD,wBAAgB,0BAA0B,KAIhC,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,KAAG,IAAI,CA2C/D;AAaD,wBAAgB,wBAAwB,KAC9B,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,KAAG,IAAI,CA0B/D;AAYD,wBAAgB,4BAA4B,WA3M7B,OAAO,OAAO,QAAQ,QAAQ,YAAY,KAAG,IAAI,IAiN/D"}

package/dist/a2a/server/middleware/resourceProtection.js

@@ -0,0 +1,240 @@
+import { logger } from '../../../utils/logger.js';
+const connections = new Map();
+const DEFAULT_MAX_TRACKED_IPS = 10_000;
+function getMaxTrackedIPs() {
+    const env = process.env.A2A_MAX_TRACKED_IPS;
+    if (!env)
+        return DEFAULT_MAX_TRACKED_IPS;
+    const parsed = parseInt(env, 10);
+    if (isNaN(parsed) || parsed <= 0 || parsed > 1_000_000) {
+        logger.warn(`Invalid A2A_MAX_TRACKED_IPS: ${env}, using default ${DEFAULT_MAX_TRACKED_IPS}`);
+        return DEFAULT_MAX_TRACKED_IPS;
+    }
+    return parsed;
+}
+let lastCapacityWarningTime = 0;
+const CAPACITY_WARNING_COOLDOWN_MS = 60_000;
+const DEFAULT_MAX_CONNECTIONS_PER_IP = 10;
+const DEFAULT_MAX_PAYLOAD_SIZE_MB = 10;
+const DEFAULT_CONNECTION_IDLE_TIMEOUT_MS = 5 * 60 * 1000;
+let cleanupTimer = null;
+function getMaxConnectionsPerIP() {
+    const env = process.env.A2A_MAX_CONNECTIONS_PER_IP;
+    if (!env)
+        return DEFAULT_MAX_CONNECTIONS_PER_IP;
+    const parsed = parseInt(env, 10);
+    if (isNaN(parsed) || parsed <= 0) {
+        logger.warn(`Invalid A2A_MAX_CONNECTIONS_PER_IP: ${env}, using default ${DEFAULT_MAX_CONNECTIONS_PER_IP}`);
+        return DEFAULT_MAX_CONNECTIONS_PER_IP;
+    }
+    return parsed;
+}
+function getMaxPayloadSizeMB() {
+    const env = process.env.A2A_MAX_PAYLOAD_SIZE_MB;
+    if (!env)
+        return DEFAULT_MAX_PAYLOAD_SIZE_MB;
+    const parsed = parseInt(env, 10);
+    if (isNaN(parsed) || parsed <= 0 || parsed > 100) {
+        logger.warn(`Invalid A2A_MAX_PAYLOAD_SIZE_MB: ${env}, using default ${DEFAULT_MAX_PAYLOAD_SIZE_MB}`);
+        return DEFAULT_MAX_PAYLOAD_SIZE_MB;
+    }
+    return parsed;
+}
+function cleanupIdleConnections(aggressive = false) {
+    const now = Date.now();
+    const timeout = aggressive
+        ? 30_000
+        : DEFAULT_CONNECTION_IDLE_TIMEOUT_MS;
+    let cleaned = 0;
+    for (const [ip, data] of connections.entries()) {
+        if (data.count === 0 || now - data.lastActivity > timeout) {
+            connections.delete(ip);
+            cleaned++;
+        }
+    }
+    if (cleaned > 0) {
+        logger.debug('[Resource Protection] Cleaned up idle connections', {
+            count: cleaned,
+            remaining: connections.size,
+            aggressive,
+        });
+    }
+    return cleaned;
+}
+export function startResourceProtectionCleanup() {
+    if (cleanupTimer) {
+        return;
+    }
+    cleanupTimer = setInterval(() => {
+        cleanupIdleConnections();
+    }, 60 * 1000);
+    logger.info('[Resource Protection] Cleanup started');
+}
+export function stopResourceProtectionCleanup() {
+    if (cleanupTimer) {
+        clearInterval(cleanupTimer);
+        cleanupTimer = null;
+        logger.info('[Resource Protection] Cleanup stopped');
+    }
+}
+export function clearConnectionTracking() {
+    connections.clear();
+}
+export function getConnectionStats() {
+    const totalIPs = connections.size;
+    let totalConnections = 0;
+    for (const data of connections.values()) {
+        totalConnections += data.count;
+    }
+    const topIPs = Array.from(connections.entries())
+        .map(([ip, data]) => ({ ip, connections: data.count }))
+        .sort((a, b) => b.connections - a.connections)
+        .slice(0, 10);
+    return {
+        totalIPs,
+        totalConnections,
+        topIPs,
+    };
+}
+export function connectionLimitMiddleware() {
+    const maxConnections = getMaxConnectionsPerIP();
+    const maxTrackedIPs = getMaxTrackedIPs();
+    return (req, res, next) => {
+        const ip = req.ip || req.socket.remoteAddress || 'unknown';
+        const now = Date.now();
+        let connectionData = connections.get(ip);
+        if (!connectionData) {
+            if (connections.size >= maxTrackedIPs) {
+                const cleaned = cleanupIdleConnections(true);
+                if (connections.size >= maxTrackedIPs) {
+                    if (now - lastCapacityWarningTime > CAPACITY_WARNING_COOLDOWN_MS) {
+                        lastCapacityWarningTime = now;
+                        logger.warn('[Resource Protection] IP tracking capacity exhausted', {
+                            maxTrackedIPs,
+                            currentTrackedIPs: connections.size,
+                            cleanedInAttempt: cleaned,
+                            rejectedIP: ip,
+                        });
+                    }
+                    res.status(503).json({
+                        success: false,
+                        error: {
+                            code: 'SERVICE_OVERLOADED',
+                            message: 'Service temporarily overloaded, please try again later',
+                        },
+                    });
+                    return;
+                }
+            }
+            connectionData = { count: 0, lastActivity: now };
+            connections.set(ip, connectionData);
+        }
+        if (connectionData.count >= maxConnections) {
+            logger.warn('[Resource Protection] Connection limit exceeded', {
+                ip,
+                currentConnections: connectionData.count,
+                maxConnections,
+            });
+            res.status(503).json({
+                success: false,
+                error: {
+                    code: 'CONNECTION_LIMIT_EXCEEDED',
+                    message: `Too many concurrent connections from your IP. Maximum: ${maxConnections}`,
+                },
+            });
+            return;
+        }
+        connectionData.count++;
+        connectionData.lastActivity = now;
+        let decremented = false;
+        const decrementConnection = () => {
+            if (decremented)
+                return;
+            decremented = true;
+            const data = connections.get(ip);
+            if (data) {
+                data.count = Math.max(0, data.count - 1);
+                data.lastActivity = Date.now();
+                if (data.count === 0) {
+                    connections.delete(ip);
+                }
+            }
+        };
+        res.on('finish', decrementConnection);
+        res.on('close', decrementConnection);
+        next();
+    };
+}
+export function payloadSizeLimitMiddleware() {
+    const maxSizeMB = getMaxPayloadSizeMB();
+    const maxSizeBytes = maxSizeMB * 1024 * 1024;
+    return (req, res, next) => {
+        const contentLength = req.get('content-length');
+        if (contentLength) {
+            const size = parseInt(contentLength, 10);
+            if (isNaN(size)) {
+                logger.warn('[Resource Protection] Invalid Content-Length header', {
+                    contentLength,
+                    ip: req.ip,
+                });
+                res.status(400).json({
+                    success: false,
+                    error: {
+                        code: 'INVALID_CONTENT_LENGTH',
+                        message: 'Invalid Content-Length header',
+                    },
+                });
+                return;
+            }
+            if (size > maxSizeBytes) {
+                logger.warn('[Resource Protection] Payload size exceeded', {
+                    size,
+                    maxSize: maxSizeBytes,
+                    ip: req.ip,
+                });
+                res.status(413).json({
+                    success: false,
+                    error: {
+                        code: 'PAYLOAD_TOO_LARGE',
+                        message: `Request payload too large. Maximum: ${maxSizeMB}MB`,
+                        maxSizeMB,
+                    },
+                });
+                return;
+            }
+        }
+        next();
+    };
+}
+export function memoryPressureMiddleware() {
+    return (req, res, next) => {
+        const memUsage = process.memoryUsage();
+        const heapUsedMB = memUsage.heapUsed / 1024 / 1024;
+        const heapTotalMB = memUsage.heapTotal / 1024 / 1024;
+        const heapUsagePercent = (heapUsedMB / heapTotalMB) * 100;
+        if (heapUsagePercent > 90) {
+            logger.warn('[Resource Protection] High memory pressure', {
+                heapUsedMB: heapUsedMB.toFixed(2),
+                heapTotalMB: heapTotalMB.toFixed(2),
+                heapUsagePercent: heapUsagePercent.toFixed(2),
+            });
+            res.status(503).json({
+                success: false,
+                error: {
+                    code: 'SERVICE_OVERLOADED',
+                    message: 'Service temporarily overloaded, please try again later',
+                },
+            });
+            return;
+        }
+        next();
+    };
+}
+export function resourceProtectionMiddleware() {
+    return [
+        memoryPressureMiddleware(),
+        connectionLimitMiddleware(),
+        payloadSizeLimitMiddleware(),
+    ];
+}
+//# sourceMappingURL=resourceProtection.js.map

package/dist/a2a/server/middleware/resourceProtection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resourceProtection.js","sourceRoot":"","sources":["../../../../src/a2a/server/middleware/resourceProtection.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAOlD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAmD,CAAC;AAK/E,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAevC,SAAS,gBAAgB;IACvB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IAC5C,IAAI,CAAC,GAAG;QAAE,OAAO,uBAAuB,CAAC;IAEzC,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACjC,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,GAAG,SAAS,EAAE,CAAC;QACvD,MAAM,CAAC,IAAI,CAAC,gCAAgC,GAAG,mBAAmB,uBAAuB,EAAE,CAAC,CAAC;QAC7F,OAAO,uBAAuB,CAAC;IACjC,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAMD,IAAI,uBAAuB,GAAG,CAAC,CAAC;AAChC,MAAM,4BAA4B,GAAG,MAAM,CAAC;AAK5C,MAAM,8BAA8B,GAAG,EAAE,CAAC;AAC1C,MAAM,2BAA2B,GAAG,EAAE,CAAC;AACvC,MAAM,kCAAkC,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAKzD,IAAI,YAAY,GAA0B,IAAI,CAAC;AAK/C,SAAS,sBAAsB;IAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC;IACnD,IAAI,CAAC,GAAG;QAAE,OAAO,8BAA8B,CAAC;IAEhD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACjC,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QACjC,MAAM,CAAC,IAAI,CAAC,uCAAuC,GAAG,mBAAmB,8BAA8B,EAAE,CAAC,CAAC;QAC3G,OAAO,8BAA8B,CAAC;IACxC,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,mBAAmB;IAC1B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;IAChD,IAAI,CAAC,GAAG;QAAE,OAAO,2BAA2B,CAAC;IAE7C,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACjC,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,oCAAoC,GAAG,mBAAmB,2BAA2B,EAAE,CAAC,CAAC;QACrG,OAAO,2BAA2B,CAAC;IACrC,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAYD,SAAS,sBAAsB,CAAC,UAAU,GAAG,KAAK;IAChD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEvB,MAAM,OAAO,GAAG,UAAU;QACxB,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,kCAAkC,CAAC;IACvC,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;QAE/C,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,GAAG,GAAG,IAAI,CAAC,YAAY,GAAG,OAAO,EAAE,CAAC;YAC1D,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACvB,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;QAChB,MAAM,CAAC,KAAK,CAAC,mDAAmD,EAAE;YAChE,KAAK,EAAE,OAAO;YACd,SAAS,EAAE,WAAW,CAAC,IAAI;YAC3B,UAAU;SACX,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAKD,MAAM,UAAU,8BAA8B;IAC5C,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO;IACT,CAAC;IAGD,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE;QAC9B,sBAAsB,EAAE,CAAC;IAC3B,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,CAAC;IAEd,MAAM,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;AACvD,CAAC;AAKD,MAAM,UAAU,6BAA6B;IAC3C,IAAI,YAAY,EAAE,CAAC;QACjB,aAAa,CAAC,YAAY,CAAC,CAAC;QAC5B,YAAY,GAAG,IAAI,CAAC;QACpB,MAAM,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAKD,MAAM,UAAU,uBAAuB;IACrC,WAAW,CAAC,KAAK,EAAE,CAAC;AACtB,CAAC;AAKD,MAAM,UAAU,kBAAkB;IAKhC,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC;IAClC,IAAI,gBAAgB,GAAG,CAAC,CAAC;IAEzB,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC;QACxC,gBAAgB,IAAI,IAAI,CAAC,KAAK,CAAC;IACjC,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;SAC7C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;SACtD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC;SAC7C,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEhB,OAAO;QACL,QAAQ;QACR,gBAAgB;QAChB,MAAM;KACP,CAAC;AACJ,CAAC;AAaD,MAAM,UAAU,yBAAyB;IACvC,MAAM,cAAc,GAAG,sBAAsB,EAAE,CAAC;IAChD,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;IAEzC,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAQ,EAAE;QAC/D,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,SAAS,CAAC;QAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAGvB,IAAI,cAAc,GAAG,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEzC,IAAI,CAAC,cAAc,EAAE,CAAC;YAEpB,IAAI,WAAW,CAAC,IAAI,IAAI,aAAa,EAAE,CAAC;gBAEtC,MAAM,OAAO,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;gBAE7C,IAAI,WAAW,CAAC,IAAI,IAAI,aAAa,EAAE,CAAC;oBAEtC,IAAI,GAAG,GAAG,uBAAuB,GAAG,4BAA4B,EAAE,CAAC;wBACjE,uBAAuB,GAAG,GAAG,CAAC;wBAC9B,MAAM,CAAC,IAAI,CAAC,sDAAsD,EAAE;4BAClE,aAAa;4BACb,iBAAiB,EAAE,WAAW,CAAC,IAAI;4BACnC,gBAAgB,EAAE,OAAO;4BACzB,UAAU,EAAE,EAAE;yBACf,CAAC,CAAC;oBACL,CAAC;oBAED,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;wBACnB,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE;4BACL,IAAI,EAAE,oBAAoB;4BAC1B,OAAO,EAAE,wDAAwD;yBAClE;qBACF,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;YACH,CAAC;YAED,cAAc,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC;YACjD,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;QACtC,CAAC;QAGD,IAAI,cAAc,CAAC,KAAK,IAAI,cAAc,EAAE,CAAC;YAC3C,MAAM,CAAC,IAAI,CAAC,iDAAiD,EAAE;gBAC7D,EAAE;gBACF,kBAAkB,EAAE,cAAc,CAAC,KAAK;gBACxC,cAAc;aACf,CAAC,CAAC;YAEH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,2BAA2B;oBACjC,OAAO,EAAE,0DAA0D,cAAc,EAAE;iBACpF;aACF,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAGD,cAAc,CAAC,KAAK,EAAE,CAAC;QACvB,cAAc,CAAC,YAAY,GAAG,GAAG,CAAC;QAKlC,IAAI,WAAW,GAAG,KAAK,CAAC;QAExB,MAAM,mBAAmB,GAAG,GAAS,EAAE;YACrC,IAAI,WAAW;gBAAE,OAAO;YACxB,WAAW,GAAG,IAAI,CAAC;YAEnB,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACjC,IAAI,IAAI,EAAE,CAAC;gBACT,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;gBACzC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAG/B,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;oBACrB,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC;QACH,CAAC,CAAC;QAGF,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;QACtC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;QAErC,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC;AAeD,MAAM,UAAU,0BAA0B;IACxC,MAAM,SAAS,GAAG,mBAAmB,EAAE,CAAC;IACxC,MAAM,YAAY,GAAG,SAAS,GAAG,IAAI,GAAG,IAAI,CAAC;IAE7C,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAQ,EAAE;QAC/D,MAAM,aAAa,GAAG,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAEhD,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;YAEzC,IAAI,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChB,MAAM,CAAC,IAAI,CAAC,qDAAqD,EAAE;oBACjE,aAAa;oBACb,EAAE,EAAE,GAAG,CAAC,EAAE;iBACX,CAAC,CAAC;gBAEH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE;wBACL,IAAI,EAAE,wBAAwB;wBAC9B,OAAO,EAAE,+BAA+B;qBACzC;iBACF,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,IAAI,IAAI,GAAG,YAAY,EAAE,CAAC;gBACxB,MAAM,CAAC,IAAI,CAAC,6CAA6C,EAAE;oBACzD,IAAI;oBACJ,OAAO,EAAE,YAAY;oBACrB,EAAE,EAAE,GAAG,CAAC,EAAE;iBACX,CAAC,CAAC;gBAEH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE;wBACL,IAAI,EAAE,mBAAmB;wBACzB,OAAO,EAAE,uCAAuC,SAAS,IAAI;wBAC7D,SAAS;qBACV;iBACF,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;QACH,CAAC;QAED,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC;AAaD,MAAM,UAAU,wBAAwB;IACtC,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAQ,EAAE;QAC/D,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QACvC,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,GAAG,IAAI,GAAG,IAAI,CAAC;QACnD,MAAM,WAAW,GAAG,QAAQ,CAAC,SAAS,GAAG,IAAI,GAAG,IAAI,CAAC;QACrD,MAAM,gBAAgB,GAAG,CAAC,UAAU,GAAG,WAAW,CAAC,GAAG,GAAG,CAAC;QAG1D,IAAI,gBAAgB,GAAG,EAAE,EAAE,CAAC;YAC1B,MAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE;gBACxD,UAAU,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;gBACjC,WAAW,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;gBACnC,gBAAgB,EAAE,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;aAC9C,CAAC,CAAC;YAEH,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,oBAAoB;oBAC1B,OAAO,EAAE,wDAAwD;iBAClE;aACF,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC;AAYD,MAAM,UAAU,4BAA4B;IAC1C,OAAO;QACL,wBAAwB,EAAE;QAC1B,yBAAyB,EAAE;QAC3B,0BAA0B,EAAE;KAC7B,CAAC;AACJ,CAAC"}

package/dist/a2a/server/middleware/timeout.d.ts

@@ -0,0 +1,4 @@
+import { Request, Response, NextFunction } from 'express';
+export declare function getTimeoutMs(): number;
+export declare function requestTimeoutMiddleware(timeoutMs?: number): (req: Request, res: Response, next: NextFunction) => void;
+//# sourceMappingURL=timeout.d.ts.map

package/dist/a2a/server/middleware/timeout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"timeout.d.ts","sourceRoot":"","sources":["../../../../src/a2a/server/middleware/timeout.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAU1D,wBAAgB,YAAY,IAAI,MAAM,CAarC;AAaD,wBAAgB,wBAAwB,CAAC,SAAS,GAAE,MAAuB,IACjE,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,KAAG,IAAI,CA2B/D"}

package/dist/a2a/server/middleware/timeout.js

@@ -0,0 +1,36 @@
+const DEFAULT_TIMEOUT_MS = 30000;
+export function getTimeoutMs() {
+    const envTimeout = process.env.A2A_REQUEST_TIMEOUT_MS;
+    if (!envTimeout) {
+        return DEFAULT_TIMEOUT_MS;
+    }
+    const parsed = parseInt(envTimeout, 10);
+    if (isNaN(parsed) || parsed <= 0) {
+        console.warn(`Invalid A2A_REQUEST_TIMEOUT_MS value: ${envTimeout}, using default ${DEFAULT_TIMEOUT_MS}ms`);
+        return DEFAULT_TIMEOUT_MS;
+    }
+    return parsed;
+}
+export function requestTimeoutMiddleware(timeoutMs = getTimeoutMs()) {
+    return (req, res, next) => {
+        const timer = setTimeout(() => {
+            if (!res.headersSent) {
+                res.status(408).json({
+                    success: false,
+                    error: {
+                        code: 'REQUEST_TIMEOUT',
+                        message: `Request timeout after ${timeoutMs}ms`
+                    }
+                });
+            }
+        }, timeoutMs);
+        res.on('finish', () => {
+            clearTimeout(timer);
+        });
+        res.on('close', () => {
+            clearTimeout(timer);
+        });
+        next();
+    };
+}
+//# sourceMappingURL=timeout.js.map

package/dist/a2a/server/middleware/timeout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"timeout.js","sourceRoot":"","sources":["../../../../src/a2a/server/middleware/timeout.ts"],"names":[],"mappings":"AAKA,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAKjC,MAAM,UAAU,YAAY;IAC1B,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;IACtD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACxC,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,IAAI,CAAC,yCAAyC,UAAU,mBAAmB,kBAAkB,IAAI,CAAC,CAAC;QAC3G,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAaD,MAAM,UAAU,wBAAwB,CAAC,YAAoB,YAAY,EAAE;IACzE,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAQ,EAAE;QAE/D,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAE5B,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE;wBACL,IAAI,EAAE,iBAAiB;wBACvB,OAAO,EAAE,yBAAyB,SAAS,IAAI;qBAChD;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC,EAAE,SAAS,CAAC,CAAC;QAGd,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;YACpB,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;QAGH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACnB,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;QAEH,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC"}

package/dist/a2a/storage/TaskQueue.d.ts

@@ -1,8 +1,11 @@
 import type { Task, TaskFilter, TaskStatus, CreateTaskParams, UpdateTaskParams, Message, AddMessageParams, MessageCreated, Artifact } from '../types/index.js';
 export declare class TaskQueue {
     private db;
+    private preparedStatements;
+    private isClosed;
     constructor(agentId: string, dbPath?: string);
     private initializeSchema;
+    private getStatement;
     createTask(params: CreateTaskParams): Task;
     getTask(taskId: string): Task | null;
     listTasks(filter?: TaskFilter): TaskStatus[];

package/dist/a2a/storage/TaskQueue.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"TaskQueue.d.ts","sourceRoot":"","sources":["../../../src/a2a/storage/TaskQueue.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EACV,IAAI,EAGJ,UAAU,EACV,UAAU,EACV,gBAAgB,EAChB,gBAAgB,EAChB,OAAO,EACP,gBAAgB,EAChB,cAAc,EACd,QAAQ,EAET,MAAM,mBAAmB,CAAC;AAuD3B,qBAAa,SAAS;IACpB,OAAO,CAAC,EAAE,CAAoB;gBAElB,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;IAQ5C,OAAO,CAAC,gBAAgB;IAMxB,UAAU,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI;IA+C1C,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI;IAWpC,SAAS,CAAC,MAAM,CAAC,EAAE,UAAU,GAAG,UAAU,EAAE;IAoF5C,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,GAAG,OAAO;IA0CnE,UAAU,CAAC,MAAM,EAAE,gBAAgB,GAAG,cAAc;IA6BpD,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,EAAE;IAsBtC,WAAW,CAAC,MAAM,EAAE;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;QACzB,QAAQ,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC;QAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACpC,GAAG,MAAM;IAsCV,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,EAAE;IAyBxC,KAAK,IAAI,IAAI;IAIb,OAAO,CAAC,SAAS;CAkBlB"}
+{"version":3,"file":"TaskQueue.d.ts","sourceRoot":"","sources":["../../../src/a2a/storage/TaskQueue.ts"],"names":[],"mappings":"AA2CA,OAAO,KAAK,EACV,IAAI,EAGJ,UAAU,EACV,UAAU,EACV,gBAAgB,EAChB,gBAAgB,EAChB,OAAO,EACP,gBAAgB,EAChB,cAAc,EACd,QAAQ,EAET,MAAM,mBAAmB,CAAC;AAyF3B,qBAAa,SAAS;IACpB,OAAO,CAAC,EAAE,CAAoB;IAE9B,OAAO,CAAC,kBAAkB,CAAkC;IAE5D,OAAO,CAAC,QAAQ,CAAS;gBAEb,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;IA8B5C,OAAO,CAAC,gBAAgB;IAUxB,OAAO,CAAC,YAAY;IASpB,UAAU,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI;IAiD1C,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI;IA4BpC,SAAS,CAAC,MAAM,CAAC,EAAE,UAAU,GAAG,UAAU,EAAE;IA0H5C,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,GAAG,OAAO;IA8CnE,UAAU,CAAC,MAAM,EAAE,gBAAgB,GAAG,cAAc;IA6BpD,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,EAAE;IAsBtC,WAAW,CAAC,MAAM,EAAE;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;QACzB,QAAQ,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC;QAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KACpC,GAAG,MAAM;IAsCV,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,EAAE;IAyBxC,KAAK,IAAI,IAAI;IAWb,OAAO,CAAC,SAAS;CAkBlB"}